CN104021168B - A kind of method and device for browsing webpage - Google Patents

Abstract

The present invention discloses a method and device for browsing web pages, wherein the method includes: when a page thread creates a plug-in/control object, creating a plug-in/control process for the plug-in/control object that is independent of the page process; The independent plug-in/control process is put into a sandbox to run; by implementing inter-process communication between the plug-in/control process and the page process, browsing of the webpage is realized; wherein, the page process runs in the sandbox out of the box. Through the invention, the stability of browser operation can be improved while ensuring the safety of surfing the Internet.

Description

Method and device for browsing web pages

The patent application of the present invention is a divisional application of the Chinese invention patent application with the filing date of December 28, 2011, the application number of 201110448359.1, and the title of "A Method and Device for Browsing Web Pages".

technical field

The invention relates to the technical field of browser security, in particular to a method and device for browsing webpages.

Background technique

With the progress of the times, the Internet has become an important part of people's lives, and web browsers have naturally become one of the most important software in devices such as computers. The browser provides BHO (Browser Helper Object), AxtiveX control, and toolbar component interfaces, which can be customized and improved in the form of plug-ins/controls.

However, with the growing importance of web browsers, malicious software, Trojan horses, spyware and other network attacks have also gradually increased, especially browser plug-ins. Since plug-in/control programs are issued by different publishers, their technical level There are also good and bad, and there are often security holes, so it is easy to become the key target of Trojan horses and viruses.

For example, research has found that commonly used plug-ins such as Adobe Flash, Windows Media Player, and Realplayer are extremely vulnerable to attacks. Taking advantage of the security loopholes in browser plug-ins, the virus can obtain the user's system authority, download, install, and run malicious code to the user's computer, steal the user's personal information (such as online banking information, email, game password), etc., and harm the user. serious impact on system security.

In addition, some plug-ins are malicious plug-ins themselves, such as adware (Adware) or spyware (Spyware). This type of malicious plug-in program can monitor the user's online behavior and report the recorded data to the creator of the plug-in program to achieve illegal purposes such as advertising, stealing game or bank account passwords, etc.

In order to improve the security of users when surfing the Internet, it is usually possible to combine browser technology with sandbox technology. A sandbox is a virtual system program that provides an isolated running mechanism for programs through virtualized disk, memory, and network resources. For programs running in the sandbox, all files and registry contents created, modified, and deleted will be virtualized and redirected to ensure that programs cannot modify key parts of the system and destroy the real environment of the system.

In the prior art, usually, the browser process is directly put into a sandbox to run, so that the security of the user when surfing the Internet can be ensured to a certain extent. However, due to limitations in the design level of plug-ins/controls, unstable phenomena such as stuck and crashed plug-ins/controls often occur during runtime, which in turn causes the entire page process to lose response, affecting the stability of the browser .

Therefore, a technical problem that urgently needs to be solved by those skilled in the art is how to improve the stability of the browser operation while ensuring the safety of surfing the Internet.

Contents of the invention

The invention provides a method and device for browsing webpages, which can improve the running stability of the browser while ensuring the safety of surfing the Internet.

The present invention provides following scheme:

A method of browsing a webpage, comprising:

When the page thread creates a plug-in/control object, create a plug-in/control process independent of the page process for the plug-in/control object;

Put the independent plug-in/control process into a sandbox to run;

By implementing inter-process communication between the plug-in/control process and the page process, browsing of the webpage is realized; wherein, the page process runs outside the sandbox.

Wherein, the implementation of inter-process communication between the plug-in/control process and the page process includes:

Create a main window object and a browser host object in the independent plug-in/control process, connect the browser host object to the main window object, so that the page process sends the plug-in to the plug-in through the main window / The control process sends a message.

Wherein, the page process sending a message to the plug-in/control process through the main window includes:

The page process sends mouse and keyboard response event messages to the plug-in/control process through the main window.

Wherein, the implementation of inter-process communication between the plug-in/control process and the page process includes:

When the plug-in/control process in the sandbox needs to send an instruction to the outside of the sandbox, judge whether the instruction is sent to the plug-in/control process and belongs to the preset communication instruction set, and if so, release the instruction , so that the plug-in/control process can send a message to the page process.

Wherein, sending a message from the plug-in/control process to the page process includes:

When the plug-in/control process has a script that needs to be called, forward the script to the page process that creates the plug-in process;

or,

When the plug-in/control process generates a drawing event, the data corresponding to the drawing event is sent to the corresponding page process.

A device for browsing web pages, comprising:

The independent process creation unit is used to create a plug-in process independent of the page process for the plug-in/control object when the page thread creates the plug-in/control object;

A sandbox driver unit, configured to put the independent plug-in/control process into a sandbox to run;

The inter-process communication unit is configured to implement inter-process communication between the plug-in/control process and the page process to realize web page browsing.

Wherein, the inter-process communication unit includes:

The first communication subunit is used to create a main window object and a browser host object in the independent plug-in/control process, and connect the browser host object to the main window object so that the page process can pass through The main window sends a message to the plug-in/control process.

Wherein, the first communication subunit is specifically used for:

The page process sends mouse and keyboard response event messages to the plug-in/control process through the main window.

Wherein, the inter-process communication unit includes:

The second communication subunit is used to determine whether the instruction is sent to the plug-in/control process and belongs to a preset communication instruction set when the plug-in/control process in the sandbox needs to send an instruction to the outside of the sandbox, If so, the instruction is released, so that the plug-in/control process can send a message to the page process.

Wherein, the second communication subunit is specifically used for:

When the plug-in/control process has a script that needs to be called, forward the script to the page process that creates the plug-in/control process;

or,

When the plug-in/control process generates a drawing event, the data corresponding to the drawing event is sent to the corresponding page process.

According to the specific embodiments provided by the invention, the invention discloses the following technical effects:

Through the present invention, since the plug-in/control is separated from the browser page process, and the plug-in/control process is put into the sandbox to run in real time, it is possible to avoid problems caused by the plug-in/control while ensuring the security of users surfing the Internet. The phenomenon of freezing or crashing of the browser causes the browser page to lose response, thereby improving the stability of the browser operation.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the accompanying drawings required in the embodiments. Obviously, the accompanying drawings in the following description are only some of the present invention. Embodiments, for those of ordinary skill in the art, other drawings can also be obtained based on these drawings without any creative effort.

Fig. 1 is the flowchart of the method provided by the embodiment of the present invention;

Fig. 2 is a schematic diagram of a device provided by an embodiment of the present invention.

detailed description

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. All other embodiments obtained by persons of ordinary skill in the art based on the embodiments of the present invention belong to the protection scope of the present invention.

First of all, it needs to be explained that the inventor found in the process of implementing the present invention that in the traditional implementation mode, the plug-in/control and the page are in the same process. Components, etc., when loaded during the browser process, such objects run in the same context as the browser and can perform any action on available windows and modules. For example, a BHO can detect typical events such as GoBack, GoForward, DocumentComplete, etc. In addition, a BHO can access the browser's menu and toolbar and make changes, and can also generate a new window to display some additional information about the current web page , and can also install hooks to monitor some messages and actions, which may bring security risks to the user's system. On the other hand, it is precisely because the plug-in/control and the page are in the same process, so when the plug-in/control is stuck, crashed or other unstable conditions, it will cause the entire page process to lose response and affect the stability of the browser .

Based on the above analysis, the embodiments of the present invention attempt to provide a new method for browsing webpages, through which the purpose of improving the stability of browser operation while ensuring the security of Internet browsing is achieved.

Referring to Fig. 1, the method for browsing a webpage provided by the embodiment of the present invention may include the following steps:

S101: When the page thread creates a plug-in/control object, create a plug-in process independent of the page process for the plug-in/control object;

Generally speaking, if there is a plug-in in a page, the page process will create the plug-in/control object during the page loading process. In the traditional way, the plug-in/control object will be created directly in the page process, while in In the embodiment of the present invention, when a page process creates a plug-in/control object, a plug-in/control process independent of the page process may be created for the plug-in/control object. That is to say, make the plug-in/control and the page in different processes, so that if the plug-in is stuck or crashes, it will not affect the operation of other processes, so it will not make the page happen Unresponsive phenomenon, to avoid affecting the stability of the browser.

S102: Put the independent plug-in/control process in a sandbox to run;

Because the plug-in/control is more likely to be attacked by a Trojan horse or a virus, in the embodiment of the present invention, the independent process created for the plug-in/control object is put into a sandbox to run, so that the And pose a threat to the user's system security.

S103: Realize web page browsing by implementing inter-process communication between the plug-in/control process and the page process; wherein, the page process runs outside the sandbox.

As a supplement or improvement to browser functions, plug-ins/controls need to cooperate with the page and plug-ins/controls to complete some browser functions. In the embodiment of the present invention, since the page and the plug-in/control are in different processes, it is necessary to enable necessary information interaction between the page and the plug-in/control, so as to ensure the realization of the browser function. The so-called information interaction here includes two cases, one case is that the page process needs to send a message to the plug-in/control process, and the other case is that the plug-in/control process needs to send a message to the page process.

In order to enable the page process to send messages to the plug-in/control process, while separating the plug-in from the browser page process and putting the plug-in/control process into the sandbox, it is also necessary to be in an independent plug-in/control process Create a main window object and a browser host object, and connect the browser host object to the main window object. Since the message interaction in the operating system is based on the window, after the main window object is created in the plug-in/control process and connected to the browser host object, when the page needs to send a message to the plug-in/control, it can send a message to the plug-in /control's main window, so that the plug-in/control process can receive the message sent by the page process through the main window.

During the specific implementation process, the page process may send messages to the plug-in/control process under various circumstances. For example, the browser page process can take over the mouse, keyboard and other response events in the plug-in/control process, and notify the plug-in process in the sandbox through the message forwarding mechanism, and then the plug-in/control process performs corresponding operations. These mouse and keyboard response events may specifically include: when the page process object changes the window size, page refresh and other events, the page process may notify the plug-in/control process object to adjust the size and position of the plug-in, and so on. Or, when the page is closed or the browser exits, the plug-in/control process can also be notified, and operations such as releasing and destroying the plug-in/control object can be completed, and so on.

And in order to make the plug-in/control process send messages to the page process, because the page process itself has a window object, it is not necessary to create a window object for the page process, but in the embodiment of the present invention, because the plug-in/control process is in the sandbox, The browser page process is outside the sandbox. At this time, if the plug-in/control process needs to communicate with the browser page process outside the sandbox in the sandbox, due to the security restrictions of the sandbox, the plug-in/control process Operation instructions to outside the sandbox will be blocked by the sandbox virtual environment, therefore, the sandbox needs to do special processing to let the necessary instructions of the plug-in/control process go outside the sandbox to notify the external browser page process, and at the same time, the external The browser page process can also notify the plug-in/control process in the sandbox of some user-operated instructions (for example, the user clicks on a certain link, or clicks on the "stop", "play" button, etc.) to perform corresponding processing.

Of course, in order to ensure security, not all messages sent by the plug-in/control process can be sent out of the sandbox. For this reason, the necessary instruction set can be defined in advance, and the sandbox will let go of the messages sent by the internal plug-in/control process. These instruction sets, thus ensuring the normal operation of the browser. In other words, in order to ensure the normal operation of the browser, the sandbox can allow some instructions to be issued outside the sandbox, but there are two prerequisites: first, the instruction is issued by the plug-in/control process, and second, the instruction is a pre-defined Only when these two conditions are met at the same time can it be released to ensure the safety of the system. Of course, in the specific implementation of the above, in addition to the above-mentioned way of defining the communication instruction set, it can also be realized in other ways, for example, it can be realized through a pipeline mechanism, etc., which will not be repeated here.

In actual implementation, these instructions that can be released from the sandbox can include various situations. For example, due to the correspondence between pages and plug-ins/controls, in order to ensure correctness during operation, if a plug-in in an independent process needs to execute a certain event, the corresponding script needs to be put into the page thread that created the plug-in/control process Central, run the script in the page thread. For this reason, the plug-in/control process can also maintain a mapping relationship between the main window of the plug-in/control and the page thread, so as to ensure the one-to-one correspondence between the page thread and the plug-in/control thread. When a script needs to be run in the plug-in/control process, the corresponding page thread can be found through the mapping relationship, and the script can be put into the page thread to run. Obviously, when the message sent by the plug-in/control process is such a message, the message should be let go, that is, the message is allowed to be sent to the page thread outside the sandbox, and this message can be written into the communication command concentrated.

In addition, since the plug-in/control process runs in a sandbox, in order to display the content related to the interface involved in the plug-in/control process to the user, it is also necessary for the plug-in/control process to display the interface-related content, displayed Data such as position and size are sent to the corresponding browser page process, and the browser page process draws the interface display results (specifically, the page process can call the IViewObject::Draw method of the plug-in/control process to complete the drawing of the plug-in/control object content and display), so that the user can see the relevant interface display results. Similarly, the drawing messages sent by the plug-in/control process can also be released from the sandbox, and such messages can be written into the communication instruction set.

It should be noted that in actual applications, not all plug-ins/controls may be allowed to be independent from the process of the page where they are located. For example, if some online banking controls are placed in another process independent of the page process, Otherwise, the corresponding function may not be realized. Therefore, in specific implementation, it is only possible to use the present invention to implement plug-ins/controls that are highly independent such as some players and flash, or plug-ins/controls that will not affect the realization of specific functions after the plug-in/control process is separated. The solution of the example is implemented, and other plug-ins/controls can still be implemented using existing technologies.

In a word, through the method for browsing web pages provided by the embodiment of the present invention, since the plug-in/control is separated from the browser page process, and the plug-in/control process is put into the sandbox to run in real time, it is possible to ensure that the user surfs the Internet. At the same time of security, avoid the phenomenon that the browser page loses response due to plug-in/control stuck or crashed, etc., thereby improving the stability of the browser operation.

Corresponding to the method for browsing webpages provided by the embodiment of the present invention, the embodiment of the present invention also provides a device for browsing webpages. Referring to FIG. 2, the device may include:

An independent process creating unit 201, configured to create a plug-in/control process independent of the page process for the plug-in/control object when the page thread creates the plug-in/control object;

A sandbox driving unit 202, configured to put the independent plug-in/control process into a sandbox to run;

The inter-process communication unit 203 is configured to implement inter-process communication between the plug-in/control process and the page process to browse web pages; wherein the page process runs outside the sandbox.

Wherein, the inter-process communication unit 203 may specifically include:

The first communication subunit is used to create a main window object and a browser host object in the independent plug-in/control process, and connect the browser host object to the main window object so that the page process can pass through The main window sends a message to the plug-in/control process.

During specific implementation, the first communication subunit may specifically be used for:

The page process sends mouse and keyboard response event messages to the plug-in/control process through the main window.

Alternatively, the inter-process communication unit 203 may also include:

The second communication subunit is used to determine whether the instruction is sent to the plug-in/control process and belongs to a preset communication instruction set when the plug-in/control process in the sandbox needs to send an instruction to the outside of the sandbox, If so, the instruction is released, so that the plug-in/control process can send a message to the page process.

During specific implementation, the second communication subunit can specifically be used for:

When the plug-in/control process has a script that needs to be called, forward the script to the page thread that creates the plug-in/control process;

or,

When the plug-in/control process generates a drawing event, the data corresponding to the drawing event is sent to the corresponding page process.

Through the device for browsing web pages provided by the embodiment of the present invention, since the plug-in/control is independent from the browser page process, and the plug-in/control process is put into the sandbox to run in real time, it can ensure the user's online security. At the same time, avoid the phenomenon that the browser page loses response due to the plug-in/control being stuck or crashed, thereby improving the stability of the browser operation.

It can be seen from the above description of the implementation manners that those skilled in the art can clearly understand that the present invention can be implemented by means of software plus a necessary general hardware platform. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art can be embodied in the form of software products, and the computer software products can be stored in storage media, such as ROM/RAM, disk , CD, etc., including several instructions to make a computer device (which may be a personal computer, server, or network device, etc.) execute the methods described in various embodiments or some parts of the embodiments of the present invention.

Each embodiment in this specification is described in a progressive manner, the same and similar parts of each embodiment can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device or system embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and for relevant parts, refer to part of the description of the method embodiments. The device and system embodiments described above are only illustrative, and the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, It can be located in one place, or it can be distributed to multiple network elements. Part or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. It can be understood and implemented by those skilled in the art without creative effort.

The method and device for browsing webpages provided by the present invention have been introduced in detail above. The principle and implementation of the present invention have been explained by using specific examples in this paper. The description of the above embodiments is only used to help understand the method of the present invention. And its core idea; at the same time, for those skilled in the art, according to the idea of the present invention, there will be changes in the specific implementation and application scope. In summary, the contents of this specification should not be construed as limiting the present invention.

Claims (6)

1. A method for browsing a web page, comprising:

when a page process creates a plug-in/control object, creating a plug-in/control process independent from the page process for the plug-in/control object;

putting the independent plug-in/control process into a sandbox for operation;

the webpage is browsed by realizing the communication between the plug-in/control process and the page process; wherein the page process runs outside of a sandbox;

the implementing communication between the plug-in/control process and the page process comprises:

when a plug-in/control process in the sandbox needs to send an instruction to the outside of the sandbox, judging whether the instruction is sent by the plug-in/control process and belongs to a preset communication instruction set, if so, releasing the instruction so that the plug-in/control process can send a message to the page process;

wherein the sending of the message to the page process by the plug-in/control process comprises:

and when the plug-in/control process has a script to be called, finding the corresponding page process according to the mapping relation, and forwarding the script to the page process for creating the plug-in/control process.

2. The method of claim 1, wherein the enabling communication between the plug-in/control process and the page process further comprises:

and creating a main window object and a browser host object in the independent plug-in/control process, and connecting the browser host object to the main window object so that the page process can send messages to the plug-in/control process through the main window.

3. The method of claim 2, wherein the page process sending a message to the plug-in/control process through the host window comprises:

and the page process sends mouse and keyboard response event messages to the plug-in/control process through the main window.

4. An apparatus for browsing a web page, comprising:

the independent process creating unit is used for creating a plug-in/control process independent from the page process for the plug-in/control object when the page process creates the plug-in/control object;

the sandbox driving unit is used for putting the independent plug-in/control process into a sandbox to operate;

the inter-process communication unit is used for realizing the browsing of the webpage by realizing the communication between the plug-in/control process and the page process;

the inter-process communication unit includes:

the second communication subunit is used for judging whether the instruction is sent to the plug-in/control process when the plug-in/control process in the sandbox needs to send the instruction to the outside of the sandbox and belongs to a preset communication instruction set, and if the instruction is sent to the outside of the sandbox, the instruction is released so that the plug-in/control process can send a message to the page process;

the second communication subunit is specifically configured to: when the plug-in/control process has a script to be called, finding a corresponding page process through a mapping relation, and forwarding the script to a page process for creating the plug-in/control process, wherein the mapping relation is a mapping relation between a plug-in/control main window and the page process maintained by the plug-in/control process.

5. The apparatus of claim 4, wherein the interprocess communication unit further comprises:

and the first communication subunit is used for creating a main window object and a browser host object in the independent plug-in/control process and connecting the browser host object to the main window object so that the page process can send messages to the plug-in/control process through the main window.

6. The apparatus according to claim 5, wherein the first communication subunit is specifically configured to:

and the page process sends mouse and keyboard response event messages to the plug-in/control process through the main window.